Search all GPOs at once

I am using Windows Server 2003 Standard Edition, SP1 and I was wondering if there is any way to search all my GPOs at once?  I have a policy that is pushing a PowerUser group but I have no idea which policy it is.  Thanks!
cnalleyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Netman66Commented:
Wait for Longhorn!  LOL....

Unfortunately, this is the pain point of GPOs - right now there is no easy way to do this.  You can run GPRESULT on the client machine and see exactly what policies are being applied to that workstation.  It's under the Computer Configuration.

0
cnalleyAuthor Commented:
Thanks Netman66!

How about a third-party application.  Does anyone know of some add-on that can search all the GPOs for a phrase or something?  
0
Jay_Jay70Commented:
you can run rsop.msc on any machine within the domain and it will show you which policy is forcing the setting......it will only show policies that apply to itself however
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

cnalleyAuthor Commented:
Thanks Jay Jay,
rsop only works for policies set with the standard settings.  We are using Policy Maker Pro which extends GPOs and they do not show in rsop so we really need something that will actually search through all the GPOs.
0
Jay_Jay70Commented:
this is true :) sorry i didnt think about that little fact :)
0
Netman66Commented:
All the settings are simple INI's that are stored in SYSVOL\domain\policies - you may get a script to look at each for Restricted Groups - it'll only be present if the setting has been made.

Once found, then the GUID of the policy is the foldername and can be found in ADUC with Advanced turned on.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cnalleyAuthor Commented:
You are a genius Netman!  Thank you so much.  

I'm using GPMC so I had to go to Group Policies and look at each one to find the GUID of the policy I was looking for but that was a much easier needle find in my haystack of GPOs.

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.